@sellable/mcp 0.1.513 → 0.1.514

package/skills/refill-sends-v2-workflow/core/flow.v1.json

@@ -1,9 +1,21 @@
 {
   "version": "v1.0",
   "workflow": "refill-sends-v2-workflow",
-  "principle": "Plan refill sends v2 as a read-only dry-run with zero mutations across managed_waterfall, dashboard_evergreen, and active_campaign lane sources.",
-  "laneSources": ["managed_waterfall", "dashboard_evergreen", "active_campaign"],
-  "terminalReasons": ["done", "no_refillable_campaigns"],
+  "principle": "Execute refill sends v2 through a fenced run record: bootstrap, plan, execute, verify, and report. Dry runs stay read-only; real runs execute only packet-named bounded work.",
+  "laneSources": [
+    "managed_waterfall",
+    "dashboard_evergreen",
+    "active_campaign"
+  ],
+  "terminalReasons": [
+    "complete",
+    "capped_by_scheduler",
+    "loaded_awaiting_scheduler",
+    "lanes_exhausted",
+    "blocked",
+    "no_refillable_campaigns",
+    "not_an_evergreen_workspace"
+  ],
   "blockers": ["workspace_access"],
   "enumeratedRungs": [
     "start_campaign",
@@ -11,16 +23,41 @@
     "wait_for_active_work",
     "enrich_more",
     "reconcile_source_copy",
+    "rerun_errored_cells",
     "add_leads_same_source",
     "paid_lane_fallback",
     "next_campaign",
     "wait_for_scheduler",
     "done"
   ],
+  "rungLabels": {
+    "start_campaign": "start the paused campaign so ready rows can schedule",
+    "approve_messages": "approve generated messages that are ready for review",
+    "wait_for_active_work": "wait for active campaign work to finish",
+    "enrich_more": "enrich the next batch of unenriched rows",
+    "reconcile_source_copy": "copy leads already found into the campaign table",
+    "add_leads_same_source": "find more leads via this campaign's original source",
+    "paid_lane_fallback": "move paid InMail demand to the connection fallback lane",
+    "next_campaign": "move to the next campaign in the lane",
+    "wait_for_scheduler": "wait for the scheduler to pick up ready rows",
+    "done": "finish the refill run",
+    "rerun_errored_cells": "re-run errored enrichment/message cells"
+  },
+  "hardRules": [
+    "dry-runs write journals only and never create run records",
+    "execute only the packet fingerprint captured at the last plan gate",
+    "validate packet coherence before dispatch; replan once, then block packet_incoherent",
+    "repair rungs come from the plan packet; the loop bounds and refuses, never self-emits repair actions",
+    "capped_by_scheduler is complete, never poll",
+    "awaiting scheduler is not an end state; window-closed reports name remaining-ready, expected pickup time, and resume handle",
+    "honest-rubric-fail means a human updates the rubric or changes lead source",
+    "source replenishment beyond same-source-automatic is a scoped create-campaign handoff, never refill-owned provider search",
+    "no campaign creation, provider-family switch, threshold lowering, scheduler writes, sends, archives, deletes, or brief/filter/message/sequence/sender mutation without a separate approval packet"
+  ],
   "requiredBootstrap": [
     {
       "tool": "get_auth_status",
-      "purpose": "Confirm MCP auth before reading workspace or plan facts."
+      "purpose": "Confirm MCP auth before reading workspace or starting a refill run."
     },
     {
       "tool": "get_active_workspace",
@@ -32,8 +69,8 @@
         "workspaceId": "{workspaceId}"
       },
       "requiredOutput": [
-        "readOnly true",
-        "approvalContract says Phase 86 handles execution"
+        "terminal, in_progress, blocked, or dry_run status",
+        "resume handle {runId, fence, gate} when in_progress"
       ]
     },
     {
@@ -61,10 +98,12 @@
           "states",
           "gateOrder",
           "enumeratedRungs",
+          "rungLabels",
           "verification",
           "laneSources",
           "terminalReasons",
-          "blockers"
+          "blockers",
+          "hardRules"
         ]
       }
     },
@@ -77,17 +116,17 @@
       "requiredOutput": [
         "planRevision or workspace_access blocker",
         "stateRevision",
-        "packet",
-        "journalPath",
+        "packet with supplyCensus/censusReason when available",
+        "pipelineDiagnosis checklist when blocked",
         "sideEffects"
       ]
     }
   ],
-  "gateOrder": ["bootstrap", "plan", "report"],
+  "gateOrder": ["bootstrap", "plan", "execute", "verify", "report"],
   "states": [
     {
       "id": "bootstrap",
-      "description": "Load the read-only command contract, workflow prompt, flow asset, and workspace facts.",
+      "description": "Load the command contract, workflow prompt, flow asset, and workspace facts. A real run starts or resumes a fenced run record; dryRun:true stays read-only and journal-only.",
       "allowedTools": [
         "get_auth_status",
         "get_active_workspace",
@@ -121,12 +160,14 @@
         }
       ],
       "transitions": {
-        "contract_loaded": "plan"
+        "contract_loaded": "plan",
+        "resume_handle_loaded": "verify",
+        "dry_run_requested": "report"
       }
     },
     {
       "id": "plan",
-      "description": "Call the read-only refill sends v2 dry-run planner exactly once for this invocation.",
+      "description": "Read a fresh get_refill_plan_v2 packet with runState fed back from the run record. The loop captures planRevision, stateRevision, and targetShapeRevision, then validates packet coherence before dispatch. The packet's supplyCensus, censusReason, and pipelineDiagnosis checklist explain the rung choice. If packet_incoherent appears, replan once; a second incoherent packet blocks.",
       "allowedTools": ["get_refill_plan_v2"],
       "onEnter": [
         {
@@ -142,12 +183,12 @@
         }
       ],
       "requiredOutput": [
-        "sideEffects all false",
         "planRevision starts with pr1: unless blocker is workspace_access",
-        "journalPath reported",
-        "chosen evergreenRung is in enumeratedRungs",
-        "lane sources are managed_waterfall, dashboard_evergreen, or active_campaign",
-        "terminal can be no_refillable_campaigns"
+        "stateRevision and targetShapeRevision captured",
+        "chosen label (evergreenRung token) is in enumeratedRungs",
+        "supplyCensus and censusReason justify prep/source/repair choices",
+        "pipelineDiagnosis checklist names firstFailing when blocked",
+        "terminal doneReason maps to terminalReasons"
       ],
       "allowedRungsSource": "enumeratedRungs",
       "doNotAllow": [
@@ -229,17 +270,79 @@
         "upsert_rubric"
       ],
       "transitions": {
-        "packet_returned": "report",
-        "workspace_access": "report"
+        "work_named": "execute",
+        "terminal_doneReason": "report",
+        "workspace_access": "report",
+        "packet_incoherent_replan": "plan",
+        "packet_incoherent_blocked": "report"
       }
     },
+    {
+      "id": "execute",
+      "description": "Execute exactly the packet head action through refill_sends_v2 internals. Bounded approvals, message preparation, same-source copies, rerun_errored_cells, saved signal continuations, paid-credit refreshes, and pinned-lane starts are allowed only when named by the packet. Execute only the fingerprint captured at the last plan gate; stale packets refuse and return to plan.",
+      "allowedTools": [
+        "refill_sends_v2",
+        "start_campaign_message_preparation",
+        "confirm_lead_list",
+        "import_leads",
+        "search_signals",
+        "select_promising_posts",
+        "start_campaign",
+        "queue_campaign_cells"
+      ],
+      "doNotAllow": [
+        "create_campaign",
+        "create_on_demand_campaign",
+        "setup_evergreen_campaigns",
+        "set_campaign_waterfall_order",
+        "refresh_paid_inmail_credits",
+        "send_inbox_draft",
+        "send_inbox_manual_reply",
+        "update_campaign_brief",
+        "set_headline_icp_criteria",
+        "set_sender_routing"
+      ],
+      "transitions": {
+        "planned_recorded": "verify",
+        "stale_packet": "plan",
+        "non_yolo_continuation": "report",
+        "lease_lost": "report"
+      }
+    },
+    {
+      "id": "verify",
+      "description": "Verify whole-row outcomes before another plan read. Reattach to an own active prep job by requestSource/requestHash; never re-dispatch prep while a matching job is active. Foreign prep waits until clear or blocks foreign_prep_active. wait_for_active_work and wait_for_source_import reread the plan on bounded cadence. wait_for_scheduler is cross-invocation: each tool call polls briefly under the host guard, heartbeats the lease, and returns in_progress sweep guidance so the agent re-invokes refill_sends_v2 with {runId,fence}. The approximately five minute scheduler budget is cumulative at the run level.",
+      "allowedTools": ["refill_sends_v2", "get_refill_plan_v2"],
+      "onEnter": [
+        {
+          "tool": "refill_sends_v2",
+          "requiredFields": ["workspaceId", "runId", "fence"]
+        }
+      ],
+      "hardRules": [
+        "do not re-dispatch prep when an own active job exists; reattach and poll status",
+        "capped_by_scheduler is complete",
+        "replan-driven repair: the planner names rerun_errored_cells, approve_messages, start_campaign, or source work; the loop bounds and refuses",
+        "conversion verdict is journaled from packet facts after the first prep batch; the plan gate withholds a second unproven prep batch",
+        "zero pickup after a confirmed sweep is debugged from pipelineDiagnosis, not waited out forever",
+        "Sales Nav and Prospeo continuation packets render a scoped $sellable:create-campaign [campaignId] handoff for same saved-search identity, import mode add into the same source list, source work only"
+      ],
+      "transitions": {
+        "verify_poll": "verify",
+        "verified": "plan",
+        "in_progress_resume": "verify",
+        "terminal": "report",
+        "blocked": "report"
+      },
+      "repeatUntil": "terminal_or_in_progress_resume_or_blocked"
+    },
     {
       "id": "report",
-      "description": "Present packet, lane source, laneChain, itinerary, warnings, blockers, plan revision, and journal path; then stop.",
+      "description": "Present the terminal or blocked report. Terminal proof is the run record at g4_terminal with a doneReason plus journal planned->did->outcome lines and a terminal block. loaded_awaiting_scheduler keeps the token for run-record compatibility, but report copy must include remaining-ready count, exact expected pickup time, and the resume handle; never render bare loaded, awaiting scheduler copy. Blocked Sales Nav and Prospeo packets reprint the scoped $sellable:create-campaign [campaignId] handoff text.",
       "allowedTools": [],
       "onEnter": [
         {
-          "action": "present_packet_itinerary_and_journal_path"
+          "action": "present_run_terminal_or_resume_report"
         }
       ],
       "terminal": true
@@ -247,20 +350,23 @@
   ],
   "verification": {
     "requiredProof": [
-      "sideEffects all false in get_refill_plan_v2 response",
+      "run record reached g4_terminal with a named doneReason",
+      "journal contains planned -> did -> outcome lines",
+      "journal contains terminal block and index line",
       "planRevision has pr1: prefix unless blocker is workspace_access",
-      "journalPath reported or journalWriteFailed warning surfaced",
-      "chosen evergreenRung belongs to enumeratedRungs",
-      "lane source belongs to managed_waterfall, dashboard_evergreen, active_campaign",
+      "chosen evergreenRung belongs to enumeratedRungs and has a plain-language rungLabels entry",
+      "managed_waterfall, dashboard_evergreen, or active_campaign lane source recorded",
       "laneChain recorded when active_campaign chain is selected",
-      "no_refillable_campaigns terminal reported when no lane is refillable",
-      "packet reviewed with itinerary and blockers"
+      "supplyCensus/censusReason and pipelineDiagnosis checklist reviewed when present",
+      "in_progress results include runId, fence, gate, and sweep or wait guidance"
     ],
     "notCompletionProof": [
       "called get_refill_plan_v2 alone",
-      "action queue exists",
-      "ready rows alone",
-      "operator wants execution"
+      "plan packet alone",
+      "action queue exists but no planned/did/outcome journal evidence",
+      "in_progress continuation without {runId,fence,gate}",
+      "journal absence",
+      "bare loaded awaiting scheduler report without expected pickup time"
     ]
   }
 }